The necessity to anonymize or pseudonymize personal data arises from ethical and legal data protection requirements (GDPR). Responsibility and loyalty towards research participants oblige researchers ethically and morally to handle and protect personal data responsibly and in consultation with participants. In particular, sensitive dataWithin the category of personal data, there is a subset known as special categories of personal data. Their definition originates from Article 9(1) of the EU GDPR (2016), which states that these include information about the data subject’s: Read More – such as information on sexual orientation, political views, or ethnic origin – may pose significant risks, including political and security-related threats for participants if published, depending on the research situation and context. These circumstances call for meticulous anonymization and pseudonymization strategies. Additionally, it is legally mandated to ensure the „protection of natural persons with regard to the processing of their personal dataThe term 'processing' is defined as 'any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;' (BlnDSG §31, 2020; EU GDPR Article 4 No. 2, 2016). Processing therefore refers to any form of working with personal data, from collection to erasure. Read More“ (GDPR, 2016, Article 1) and not to endanger their well-being, safety, and freedom. Violating this regulation can have criminal consequences (e.g., research participants can press charges against data that was published against their will).

However, it should also be noted that research participants may, in some cases, explicitly wish to be identified by name and other identity characteristics in publications or presentations (see interview with A. von Poser). Nevertheless, even such cases require a careful consideration of the pros and cons.

The decision to pseudonymize personal data or intentionally retain identifiable characteristics should be negotiated in consultation with participants and, ideally, documented in a written or oral informed consent agreementInformed consent refers to the agreement of research participants to take part in a study based on the basis of comprehensive and understandable information. The design of an informed consent must address both ethical principles and data protection requirements. Read More (see the article on Informed Consent).